Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653261393a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653261393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          7MW2io9z3nPSMNXtbOLOSngG/wKBdXyCGErP95v3ldA=
Subject key identifier:   F2:D0:EB:56:90:75:8C:9D:E9:5C:8F:8D:60:9A:EC:91:57:82:05:67
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       18C03FDF2F26795AA46A14A59157CE5517FB31AF
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653261393a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:44 +0000
ROA not before:           Fri 04 Jul 2025 00:42:44 +0000
ROA not after:            Fri 03 Jul 2026 00:47:44 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e2a9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c0:3f:df:2f:26:79:5a:a4:6a:14:a5:91:57:ce:55:17:fb:31:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:44 2025 GMT
            Not After : Jul  3 00:47:44 2026 GMT
        Subject: CN=F2D0EB5690758C9DE95C8F8D609AEC9157820567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:97:29:6e:b9:42:5a:95:92:41:64:aa:15:d7:
                    68:72:d2:27:1f:2c:d6:fa:fc:ca:59:65:c3:fe:1c:
                    3f:3f:f4:50:34:2b:81:43:a1:54:8d:16:cc:7d:e0:
                    67:31:ad:55:07:ab:99:b5:69:9a:bc:84:a1:0a:e7:
                    8b:38:29:7a:98:81:57:8d:45:82:a6:b8:ea:fd:43:
                    83:a7:51:c1:5f:b8:a6:f3:68:86:9c:b5:8f:9f:39:
                    54:7e:fa:22:95:6b:9f:4c:b1:89:58:f0:28:73:de:
                    94:7e:87:66:c4:d7:88:3b:6a:c5:27:a1:e5:36:27:
                    75:db:8e:82:70:08:9c:2f:f9:11:0d:57:70:af:10:
                    70:bc:cf:94:48:de:01:63:58:09:98:a2:68:4a:0c:
                    33:f4:99:f0:79:b9:85:d9:e3:fe:92:36:dd:0a:43:
                    51:70:08:25:79:e0:84:75:75:08:38:76:6e:87:21:
                    53:6e:d8:ce:5b:b5:3e:00:42:57:80:39:6c:c6:46:
                    62:ae:ec:c4:a2:6a:bc:68:34:18:2d:e2:b7:9a:02:
                    d5:54:61:64:1a:4d:db:47:57:bc:96:cb:12:aa:3c:
                    35:84:b9:4c:13:dc:4c:54:d8:20:68:34:c7:89:dc:
                    c3:d4:c0:fa:a3:b2:4f:31:dd:45:79:ce:c2:42:a9:
                    60:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D0:EB:56:90:75:8C:9D:E9:5C:8F:8D:60:9A:EC:91:57:82:05:67
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653261393a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e2a9::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:11:5e:15:60:06:c2:21:c5:5e:67:d4:7c:40:38:2f:b6:cb:
         a5:96:4b:94:3e:ad:e4:d6:4a:67:7d:dd:c9:43:ae:c9:8a:70:
         5f:d3:e7:9a:85:96:73:41:02:c9:1c:9c:20:27:6e:d0:ec:c0:
         ae:d0:e7:2d:78:37:b6:24:9e:03:69:6d:58:75:10:7d:ce:30:
         61:77:5f:d2:08:93:06:e3:d2:ee:17:a9:c7:91:cf:c0:cf:50:
         f9:d5:e9:b8:3a:1d:96:a1:a5:43:55:dd:6f:b9:3f:26:66:10:
         d5:9f:0c:f9:9c:c9:47:53:a2:d5:92:e8:e1:33:21:5b:62:5b:
         4b:7c:c1:73:27:44:ce:f9:0d:5f:ca:4b:5e:5f:de:86:09:17:
         aa:6b:e9:2a:9b:c3:0f:2d:1f:06:0c:cf:2e:cc:3a:06:6f:5e:
         42:53:e2:34:a9:bf:8e:d9:cd:00:3b:d0:54:93:e1:77:d4:a0:
         c4:9c:14:a1:c4:17:b2:0a:85:77:98:5b:25:0d:cc:70:60:62:
         27:bf:56:fd:8e:ee:84:8c:f6:dd:70:b0:8c:76:dd:64:8f:98:
         60:63:ce:7e:54:b2:d3:03:4d:ef:d2:71:82:23:9a:f4:70:ff:
         aa:7c:7d:1b:46:77:fa:10:be:ff:15:2c:e4:44:3e:20:52:0c:
         96:ba:31:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:49:41 2025 by rpki-client